@coana-tech/cli 14.12.143 → 14.12.144

package/cli.mjs

@@ -14866,8 +14866,8 @@ var require_utils = __commonJS({
     exports2.toPosixSlashes = (str) => str.replace(REGEX_BACKSLASH, "/");
     exports2.isWindows = () => {
       if (typeof navigator !== "undefined" && navigator.platform) {
-        const platform7 = navigator.platform.toLowerCase();
-        return platform7 === "win32" || platform7 === "windows";
+        const platform9 = navigator.platform.toLowerCase();
+        return platform9 === "win32" || platform9 === "windows";
       }
       if (typeof process !== "undefined" && process.platform) {
         return process.platform === "win32";
@@ -54897,7 +54897,7 @@ var require_lib12 = __commonJS({
     var MurmurHash3 = require_imurmurhash();
     var { onExit } = require_cjs2();
     var path9 = __require("path");
-    var { promisify: promisify2 } = __require("util");
+    var { promisify: promisify4 } = __require("util");
     var activeFiles = {};
     var threadId = function getId() {
       try {
@@ -54952,10 +54952,10 @@ var require_lib12 = __commonJS({
       const absoluteName = path9.resolve(filename);
       try {
         await serializeActiveFile(absoluteName);
-        const truename = await promisify2(fs11.realpath)(filename).catch(() => filename);
+        const truename = await promisify4(fs11.realpath)(filename).catch(() => filename);
         tmpfile = getTmpname(truename);
         if (!options.mode || !options.chown) {
-          const stats = await promisify2(fs11.stat)(truename).catch(() => {
+          const stats = await promisify4(fs11.stat)(truename).catch(() => {
           });
           if (stats) {
             if (options.mode == null) {
@@ -54966,45 +54966,45 @@ var require_lib12 = __commonJS({
             }
           }
         }
-        fd = await promisify2(fs11.open)(tmpfile, "w", options.mode);
+        fd = await promisify4(fs11.open)(tmpfile, "w", options.mode);
         if (options.tmpfileCreated) {
           await options.tmpfileCreated(tmpfile);
         }
         if (ArrayBuffer.isView(data2)) {
-          await promisify2(fs11.write)(fd, data2, 0, data2.length, 0);
+          await promisify4(fs11.write)(fd, data2, 0, data2.length, 0);
         } else if (data2 != null) {
-          await promisify2(fs11.write)(fd, String(data2), 0, String(options.encoding || "utf8"));
+          await promisify4(fs11.write)(fd, String(data2), 0, String(options.encoding || "utf8"));
         }
         if (options.fsync !== false) {
-          await promisify2(fs11.fsync)(fd);
+          await promisify4(fs11.fsync)(fd);
         }
-        await promisify2(fs11.close)(fd);
+        await promisify4(fs11.close)(fd);
         fd = null;
         if (options.chown) {
-          await promisify2(fs11.chown)(tmpfile, options.chown.uid, options.chown.gid).catch((err) => {
+          await promisify4(fs11.chown)(tmpfile, options.chown.uid, options.chown.gid).catch((err) => {
             if (!isChownErrOk(err)) {
               throw err;
             }
           });
         }
         if (options.mode) {
-          await promisify2(fs11.chmod)(tmpfile, options.mode).catch((err) => {
+          await promisify4(fs11.chmod)(tmpfile, options.mode).catch((err) => {
             if (!isChownErrOk(err)) {
               throw err;
             }
           });
         }
-        await promisify2(fs11.rename)(tmpfile, truename);
+        await promisify4(fs11.rename)(tmpfile, truename);
       } finally {
         if (fd) {
-          await promisify2(fs11.close)(fd).catch(
+          await promisify4(fs11.close)(fd).catch(
             /* istanbul ignore next */
             () => {
             }
           );
         }
         removeOnExitHandler();
-        await promisify2(fs11.unlink)(tmpfile).catch(() => {
+        await promisify4(fs11.unlink)(tmpfile).catch(() => {
         });
         activeFiles[absoluteName].shift();
         if (activeFiles[absoluteName].length > 0) {
@@ -56426,8 +56426,8 @@ var require_path_key = __commonJS({
     "use strict";
     var pathKey = (options = {}) => {
       const environment = options.env || process.env;
-      const platform7 = options.platform || process.platform;
-      if (platform7 !== "win32") {
+      const platform9 = options.platform || process.platform;
+      if (platform9 !== "win32") {
         return "PATH";
       }
       return Object.keys(environment).reverse().find((key) => key.toUpperCase() === "PATH") || "Path";
@@ -57410,9 +57410,9 @@ var require_get_stream = __commonJS({
     "use strict";
     var { constants: BufferConstants } = __require("buffer");
     var stream5 = __require("stream");
-    var { promisify: promisify2 } = __require("util");
+    var { promisify: promisify4 } = __require("util");
     var bufferStream = require_buffer_stream();
-    var streamPipelinePromisified = promisify2(stream5.pipeline);
+    var streamPipelinePromisified = promisify4(stream5.pipeline);
     var MaxBufferError = class extends Error {
       constructor() {
         super("maxBuffer exceeded");
@@ -62590,7 +62590,7 @@ var require_promisify = __commonJS({
   "../../node_modules/.pnpm/agent-base@6.0.2/node_modules/agent-base/dist/src/promisify.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    function promisify2(fn2) {
+    function promisify4(fn2) {
       return function(req, opts) {
         return new Promise((resolve45, reject) => {
           fn2.call(this, req, opts, (err, rtn) => {
@@ -62603,7 +62603,7 @@ var require_promisify = __commonJS({
         });
       };
     }
-    exports2.default = promisify2;
+    exports2.default = promisify4;
   }
 });
 
@@ -70346,9 +70346,9 @@ var require_lockfile = __commonJS({
         const SINGLE_INSTANCE_PORT = exports3.SINGLE_INSTANCE_PORT = 31997;
         const SINGLE_INSTANCE_FILENAME = exports3.SINGLE_INSTANCE_FILENAME = ".yarn-single-instance";
         const ENV_PATH_KEY = exports3.ENV_PATH_KEY = getPathKey(process.platform, process.env);
-        function getPathKey(platform7, env) {
+        function getPathKey(platform9, env) {
           let pathKey = "PATH";
-          if (platform7 === "win32") {
+          if (platform9 === "win32") {
             pathKey = "Path";
             for (const key in env) {
               if (key.toLowerCase() === "path") {
@@ -70950,14 +70950,14 @@ var require_lockfile = __commonJS({
           value: true
         });
         exports3.wait = wait;
-        exports3.promisify = promisify2;
+        exports3.promisify = promisify4;
         exports3.queue = queue;
         function wait(delay) {
           return new Promise((resolve45) => {
             setTimeout(resolve45, delay);
           });
         }
-        function promisify2(fn2, firstData) {
+        function promisify4(fn2, firstData) {
           return function(...args2) {
             return new Promise(function(resolve45, reject) {
               args2.push(function(err, ...result) {
@@ -115435,7 +115435,7 @@ var require_mock_interceptor = __commonJS({
 var require_mock_client = __commonJS({
   "../../node_modules/.pnpm/undici@5.28.5/node_modules/undici/lib/mock/mock-client.js"(exports2, module2) {
     "use strict";
-    var { promisify: promisify2 } = __require("util");
+    var { promisify: promisify4 } = __require("util");
     var Client = require_client();
     var { buildMockDispatch } = require_mock_utils();
     var {
@@ -115475,7 +115475,7 @@ var require_mock_client = __commonJS({
         return new MockInterceptor(opts, this[kDispatches]);
       }
       async [kClose]() {
-        await promisify2(this[kOriginalClose])();
+        await promisify4(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -115488,7 +115488,7 @@ var require_mock_client = __commonJS({
 var require_mock_pool = __commonJS({
   "../../node_modules/.pnpm/undici@5.28.5/node_modules/undici/lib/mock/mock-pool.js"(exports2, module2) {
     "use strict";
-    var { promisify: promisify2 } = __require("util");
+    var { promisify: promisify4 } = __require("util");
     var Pool = require_pool();
     var { buildMockDispatch } = require_mock_utils();
     var {
@@ -115528,7 +115528,7 @@ var require_mock_pool = __commonJS({
         return new MockInterceptor(opts, this[kDispatches]);
       }
       async [kClose]() {
-        await promisify2(this[kOriginalClose])();
+        await promisify4(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -126338,13 +126338,13 @@ var require_tmp = __commonJS({
 var require_tmp_promise = __commonJS({
   "../../node_modules/.pnpm/tmp-promise@3.0.3/node_modules/tmp-promise/index.js"(exports2, module2) {
     "use strict";
-    var { promisify: promisify2 } = __require("util");
+    var { promisify: promisify4 } = __require("util");
     var tmp = require_tmp();
     module2.exports.fileSync = tmp.fileSync;
-    var fileWithOptions = promisify2(
+    var fileWithOptions = promisify4(
       (options, cb) => tmp.file(
         options,
-        (err, path9, fd, cleanup) => err ? cb(err) : cb(void 0, { path: path9, fd, cleanup: promisify2(cleanup) })
+        (err, path9, fd, cleanup) => err ? cb(err) : cb(void 0, { path: path9, fd, cleanup: promisify4(cleanup) })
       )
     );
     module2.exports.file = async (options) => fileWithOptions(options);
@@ -126357,10 +126357,10 @@ var require_tmp_promise = __commonJS({
       }
     };
     module2.exports.dirSync = tmp.dirSync;
-    var dirWithOptions = promisify2(
+    var dirWithOptions = promisify4(
       (options, cb) => tmp.dir(
         options,
-        (err, path9, cleanup) => err ? cb(err) : cb(void 0, { path: path9, cleanup: promisify2(cleanup) })
+        (err, path9, cleanup) => err ? cb(err) : cb(void 0, { path: path9, cleanup: promisify4(cleanup) })
       )
     );
     module2.exports.dir = async (options) => dirWithOptions(options);
@@ -126373,7 +126373,7 @@ var require_tmp_promise = __commonJS({
       }
     };
     module2.exports.tmpNameSync = tmp.tmpNameSync;
-    module2.exports.tmpName = promisify2(tmp.tmpName);
+    module2.exports.tmpName = promisify4(tmp.tmpName);
     module2.exports.tmpdir = tmp.tmpdir;
     module2.exports.setGracefulCleanup = tmp.setGracefulCleanup;
   }
@@ -138729,7 +138729,7 @@ var require_mock_interceptor2 = __commonJS({
 var require_mock_client2 = __commonJS({
   "../../node_modules/.pnpm/undici@6.21.2/node_modules/undici/lib/mock/mock-client.js"(exports2, module2) {
     "use strict";
-    var { promisify: promisify2 } = __require("node:util");
+    var { promisify: promisify4 } = __require("node:util");
     var Client = require_client2();
     var { buildMockDispatch } = require_mock_utils2();
     var {
@@ -138769,7 +138769,7 @@ var require_mock_client2 = __commonJS({
         return new MockInterceptor(opts, this[kDispatches]);
       }
       async [kClose]() {
-        await promisify2(this[kOriginalClose])();
+        await promisify4(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -138782,7 +138782,7 @@ var require_mock_client2 = __commonJS({
 var require_mock_pool2 = __commonJS({
   "../../node_modules/.pnpm/undici@6.21.2/node_modules/undici/lib/mock/mock-pool.js"(exports2, module2) {
     "use strict";
-    var { promisify: promisify2 } = __require("node:util");
+    var { promisify: promisify4 } = __require("node:util");
     var Pool = require_pool2();
     var { buildMockDispatch } = require_mock_utils2();
     var {
@@ -138822,7 +138822,7 @@ var require_mock_pool2 = __commonJS({
         return new MockInterceptor(opts, this[kDispatches]);
       }
       async [kClose]() {
-        await promisify2(this[kOriginalClose])();
+        await promisify4(this[kOriginalClose])();
         this[kConnected] = 0;
         this[kMockAgent][Symbols.kClients].delete(this[kOrigin]);
       }
@@ -180870,7 +180870,7 @@ var require_client_metadata = __commonJS({
         const name3 = Buffer.byteLength(appName, "utf8") <= 128 ? options.appName : Buffer.from(appName, "utf8").subarray(0, 128).toString("utf8");
         metadataDocument.ifItFitsItSits("application", { name: name3 });
       }
-      const { name: name2 = "", version: version4 = "", platform: platform7 = "" } = options.driverInfo;
+      const { name: name2 = "", version: version4 = "", platform: platform9 = "" } = options.driverInfo;
       const driverInfo = {
         name: name2.length > 0 ? `nodejs|${name2}` : "nodejs",
         version: version4.length > 0 ? `${NODE_DRIVER_VERSION}|${version4}` : NODE_DRIVER_VERSION
@@ -180879,8 +180879,8 @@ var require_client_metadata = __commonJS({
         throw new error_1.MongoInvalidArgumentError("Unable to include driverInfo name and version, metadata cannot exceed 512 bytes");
       }
       let runtimeInfo = getRuntimeInfo();
-      if (platform7.length > 0) {
-        runtimeInfo = `${runtimeInfo}|${platform7}`;
+      if (platform9.length > 0) {
+        runtimeInfo = `${runtimeInfo}|${platform9}`;
       }
       if (!metadataDocument.ifItFitsItSits("platform", runtimeInfo)) {
         throw new error_1.MongoInvalidArgumentError("Unable to include driverInfo platform, metadata cannot exceed 512 bytes");
@@ -199530,14 +199530,14 @@ var require_axios = __commonJS({
       navigator: _navigator2,
       origin: origin2
     });
-    var platform7 = {
+    var platform9 = {
       ...utils,
       ...platform$1
     };
     function toURLEncodedForm2(data2, options) {
-      return toFormData3(data2, new platform7.classes.URLSearchParams(), {
+      return toFormData3(data2, new platform9.classes.URLSearchParams(), {
         visitor: function(value2, key, path9, helpers) {
-          if (platform7.isNode && utils$1.isBuffer(value2)) {
+          if (platform9.isNode && utils$1.isBuffer(value2)) {
             this.append(key, value2.toString("base64"));
             return false;
           }
@@ -199686,8 +199686,8 @@ var require_axios = __commonJS({
       maxContentLength: -1,
       maxBodyLength: -1,
       env: {
-        FormData: platform7.classes.FormData,
-        Blob: platform7.classes.Blob
+        FormData: platform9.classes.FormData,
+        Blob: platform9.classes.Blob
       },
       validateStatus: function validateStatus2(status) {
         return status >= 200 && status < 300;
@@ -200028,7 +200028,7 @@ var require_axios = __commonJS({
     }
     var DATA_URL_PATTERN2 = /^(?:([^;]+);)?(?:[^;]+;)?(base64|),([\s\S]*)$/;
     function fromDataURI2(uri, asBlob, options) {
-      const _Blob = options && options.Blob || platform7.classes.Blob;
+      const _Blob = options && options.Blob || platform9.classes.Blob;
       const protocol = parseProtocol2(uri);
       if (asBlob === void 0 && _Blob) {
         asBlob = true;
@@ -200178,7 +200178,7 @@ var require_axios = __commonJS({
       }
     };
     var readBlob$1 = readBlob2;
-    var BOUNDARY_ALPHABET2 = platform7.ALPHABET.ALPHA_DIGIT + "-_";
+    var BOUNDARY_ALPHABET2 = platform9.ALPHABET.ALPHA_DIGIT + "-_";
     var textEncoder2 = typeof TextEncoder === "function" ? new TextEncoder() : new util__default["default"].TextEncoder();
     var CRLF2 = "\r\n";
     var CRLF_BYTES2 = textEncoder2.encode(CRLF2);
@@ -200221,7 +200221,7 @@ var require_axios = __commonJS({
       const {
         tag = "form-data-boundary",
         size = 25,
-        boundary = tag + "-" + platform7.generateString(size, BOUNDARY_ALPHABET2)
+        boundary = tag + "-" + platform9.generateString(size, BOUNDARY_ALPHABET2)
       } = options || {};
       if (!utils$1.isFormData(form)) {
         throw TypeError("FormData instance required");
@@ -200445,7 +200445,7 @@ var require_axios = __commonJS({
     var isBrotliSupported2 = utils$1.isFunction(zlib__default["default"].createBrotliDecompress);
     var { http: httpFollow2, https: httpsFollow2 } = followRedirects__default["default"];
     var isHttps2 = /https:?/;
-    var supportedProtocols2 = platform7.protocols.map((protocol) => {
+    var supportedProtocols2 = platform9.protocols.map((protocol) => {
       return protocol + ":";
     });
     var flushOnFinish2 = (stream6, [throttled, flush]) => {
@@ -200572,7 +200572,7 @@ var require_axios = __commonJS({
           }
         }
         const fullPath = buildFullPath2(config3.baseURL, config3.url, config3.allowAbsoluteUrls);
-        const parsed = new URL(fullPath, platform7.hasBrowserEnv ? platform7.origin : void 0);
+        const parsed = new URL(fullPath, platform9.hasBrowserEnv ? platform9.origin : void 0);
         const protocol = parsed.protocol || supportedProtocols2[0];
         if (protocol === "data:") {
           if (config3.maxContentLength > -1) {
@@ -200944,14 +200944,14 @@ var require_axios = __commonJS({
         }
       });
     };
-    var isURLSameOrigin = platform7.hasStandardBrowserEnv ? /* @__PURE__ */ ((origin3, isMSIE) => (url3) => {
-      url3 = new URL(url3, platform7.origin);
+    var isURLSameOrigin = platform9.hasStandardBrowserEnv ? /* @__PURE__ */ ((origin3, isMSIE) => (url3) => {
+      url3 = new URL(url3, platform9.origin);
       return origin3.protocol === url3.protocol && origin3.host === url3.host && (isMSIE || origin3.port === url3.port);
     })(
-      new URL(platform7.origin),
-      platform7.navigator && /(msie|trident)/i.test(platform7.navigator.userAgent)
+      new URL(platform9.origin),
+      platform9.navigator && /(msie|trident)/i.test(platform9.navigator.userAgent)
     ) : () => true;
-    var cookies = platform7.hasStandardBrowserEnv ? (
+    var cookies = platform9.hasStandardBrowserEnv ? (
       // Standard browser envs support document.cookie
       {
         write(name2, value2, expires, path9, domain, secure) {
@@ -201072,7 +201072,7 @@ var require_axios = __commonJS({
         );
       }
       if (utils$1.isFormData(data2)) {
-        if (platform7.hasStandardBrowserEnv || platform7.hasStandardBrowserWebWorkerEnv) {
+        if (platform9.hasStandardBrowserEnv || platform9.hasStandardBrowserWebWorkerEnv) {
           headers.setContentType(void 0);
         } else if (utils$1.isFunction(data2.getHeaders)) {
           const formHeaders = data2.getHeaders();
@@ -201084,7 +201084,7 @@ var require_axios = __commonJS({
           });
         }
       }
-      if (platform7.hasStandardBrowserEnv) {
+      if (platform9.hasStandardBrowserEnv) {
         withXSRFToken && utils$1.isFunction(withXSRFToken) && (withXSRFToken = withXSRFToken(newConfig));
         if (withXSRFToken || withXSRFToken !== false && isURLSameOrigin(newConfig.url)) {
           const xsrfValue = xsrfHeaderName && xsrfCookieName && cookies.read(xsrfCookieName);
@@ -201216,7 +201216,7 @@ var require_axios = __commonJS({
           }
         }
         const protocol = parseProtocol2(_config.url);
-        if (protocol && platform7.protocols.indexOf(protocol) === -1) {
+        if (protocol && platform9.protocols.indexOf(protocol) === -1) {
           reject(new AxiosError3("Unsupported protocol " + protocol + ":", AxiosError3.ERR_BAD_REQUEST, config3));
           return;
         }
@@ -201362,7 +201362,7 @@ var require_axios = __commonJS({
       const encodeText = isFetchSupported && (typeof TextEncoder$1 === "function" ? /* @__PURE__ */ ((encoder) => (str) => encoder.encode(str))(new TextEncoder$1()) : async (str) => new Uint8Array(await new Request(str).arrayBuffer()));
       const supportsRequestStream = isRequestSupported && isReadableStreamSupported && test2(() => {
         let duplexAccessed = false;
-        const hasContentType = new Request(platform7.origin, {
+        const hasContentType = new Request(platform9.origin, {
           body: new ReadableStream$1(),
           method: "POST",
           get duplex() {
@@ -201395,7 +201395,7 @@ var require_axios = __commonJS({
           return body.size;
         }
         if (utils$1.isSpecCompliantForm(body)) {
-          const _request = new Request(platform7.origin, {
+          const _request = new Request(platform9.origin, {
             method: "POST",
             body
           });
@@ -208145,15 +208145,6 @@ var import_picomatch = __toESM(require_picomatch2(), 1);
 import { readFile as readFile2 } from "node:fs/promises";
 import { join } from "node:path";
 
-// ../web-compat-utils/src/ghsa.ts
-function extractGHSAIdFromUrl(url2) {
-  const match2 = url2.match(/(GHSA-[a-z0-9-]+)/);
-  if (match2) {
-    return match2[1];
-  }
-  return void 0;
-}
-
 // ../web-compat-utils/src/logger-singleton.ts
 var import_winston = __toESM(require_winston(), 1);
 import { Console } from "console";
@@ -209149,30 +209140,7 @@ async function registerCLIProgressSocket(isStartEvent, cliProgressEvent, tier1Sc
     handleError(error, "Error registering CLI progress", false);
   }
 }
-async function registerAnalysisMetadataSocket(subprojectPath, workspacePath, ecosystem, analysisMetadata, tier1ScanId) {
-  if (!tier1ScanId) {
-    return;
-  }
-  const abnormalExit = analysisMetadata.analysisDiagnostics.aborted ? "ABORTED" : analysisMetadata.analysisDiagnostics.timeout ? "TIMEOUT" : "NONE";
-  try {
-    const url2 = getSocketApiUrl("tier1-reachability-scan/analysis-metadata");
-    const data2 = {
-      tier1_reachability_scan_id: tier1ScanId,
-      subproject_path: subprojectPath,
-      workspace_path: workspacePath,
-      ghsa_ids: analysisMetadata.vulnUrls.map((vUrl) => extractGHSAIdFromUrl(vUrl)).filter((ghsaId) => ghsaId !== void 0),
-      analysis_diagnostics: analysisMetadata.analysisDiagnostics,
-      heuristic_name: analysisMetadata.heuristicName,
-      is_final_result: analysisMetadata.finalResult,
-      purl_type: getPurlType(ecosystem),
-      error_message: analysisMetadata.errorMessage,
-      experiment_name: analysisMetadata.experiment,
-      abnormal_exit: abnormalExit
-    };
-    await axios2.put(url2, data2, { headers: getAuthHeaders() });
-  } catch (error) {
-    handleError(error, "Error registering analysis metadata", false);
-  }
+async function registerAnalysisMetadataSocket(_subprojectPath, _workspacePath, _ecosystem, _analysisMetadata, _tier1ScanId) {
 }
 async function getLatestBucketsSocket(subprojectPath, workspacePath) {
   try {
@@ -209446,6 +209414,54 @@ async function sendLogChunkSocket(reportId, logs) {
     console.warn("Failed to send log chunk to Socket:", error.message);
   }
 }
+async function createAnalysisMetadataSocket(tier1ScanId, subprojectPath, workspacePath, ecosystem, ghsaIds, heuristicName, experimentName) {
+  if (!tier1ScanId) return void 0;
+  try {
+    const url2 = getSocketApiUrl("tier1-reachability-scan/create-analysis-metadata");
+    const data2 = {
+      tier1_reachability_scan_id: tier1ScanId,
+      subproject_path: subprojectPath,
+      workspace_path: workspacePath,
+      purl_type: getPurlType(ecosystem),
+      ghsa_ids: ghsaIds,
+      heuristic_name: heuristicName,
+      experiment_name: experimentName
+    };
+    const response = await axios2.post(url2, data2, { headers: getAuthHeaders() });
+    return response.data.analysis_metadata_id;
+  } catch (error) {
+    handleError(error, "Error creating analysis metadata", false);
+    return void 0;
+  }
+}
+async function sendTelemetrySocket(analysisMetadataId, telemetry) {
+  try {
+    const url2 = getSocketApiUrl("tier1-reachability-scan/add-telemetry");
+    const data2 = {
+      analysis_metadata_id: analysisMetadataId,
+      telemetry
+    };
+    await axios2.post(url2, data2, { headers: getAuthHeaders() });
+  } catch (error) {
+    console.warn("Failed to send telemetry to Socket:", error.message);
+  }
+}
+async function registerDiagnosticsToAnalysisMetadataSocket(analysisMetadataId, diagnosticsData) {
+  const abnormalExit = diagnosticsData.analysisDiagnostics.aborted ? "ABORTED" : diagnosticsData.analysisDiagnostics.timeout ? "TIMEOUT" : "NONE";
+  try {
+    const url2 = getSocketApiUrl("tier1-reachability-scan/register-diagnostics-to-analysis-metadata");
+    const data2 = {
+      analysis_metadata_id: analysisMetadataId,
+      analysis_diagnostics: diagnosticsData.analysisDiagnostics,
+      is_final_result: diagnosticsData.finalResult,
+      error_message: diagnosticsData.errorMessage,
+      abnormal_exit: abnormalExit
+    };
+    await axios2.post(url2, data2, { headers: getAuthHeaders() });
+  } catch (error) {
+    handleError(error, "Error registering diagnostics to analysis metadata", false);
+  }
+}
 function getSocketAPI() {
   return {
     createSocketTier1Scan,
@@ -209458,7 +209474,10 @@ function getSocketAPI() {
     finalizeAutofixRun,
     registerUpgradePurlRun,
     finalizeUpgradePurlRun,
-    sendLogChunkSocket
+    sendLogChunkSocket,
+    createAnalysisMetadataSocket,
+    sendTelemetrySocket,
+    registerDiagnosticsToAnalysisMetadataSocket
   };
 }
 
@@ -209473,7 +209492,7 @@ import { createGunzip } from "node:zlib";
 
 // ../utils/src/command-utils.ts
 import assert from "assert";
-import { execFile } from "child_process";
+import { execFile as execFile2 } from "child_process";
 
 // ../../node_modules/.pnpm/async-mutex@0.5.0/node_modules/async-mutex/index.mjs
 var E_TIMEOUT = new Error("timeout while waiting for mutex to become available");
@@ -209813,6 +209832,65 @@ var Spinner = class _Spinner {
   }
 };
 
+// ../utils/src/telemetry/telemetry-collector.ts
+import { execFile } from "child_process";
+import { platform } from "os";
+import { promisify } from "util";
+var execFileAsync = promisify(execFile);
+var TelemetryCollector = class {
+  /**
+   * Collect memory metrics for a child process by PID.
+   * Uses OS-specific commands to query memory usage.
+   *
+   * @param pid - The process ID to query
+   * @returns TelemetryMetrics or undefined if the process doesn't exist or query fails
+   */
+  async collectChildProcessMetrics(pid) {
+    if (!Number.isInteger(pid) || pid <= 0) {
+      return void 0;
+    }
+    try {
+      const currentPlatform = platform();
+      if (currentPlatform === "darwin" || currentPlatform === "linux") {
+        return await this.collectUnixProcessMetrics(pid);
+      }
+      return void 0;
+    } catch {
+      return void 0;
+    }
+  }
+  /**
+   * Collect metrics for a Unix-like system (macOS, Linux) using ps command.
+   */
+  async collectUnixProcessMetrics(pid) {
+    try {
+      const { stdout } = await execFileAsync("ps", ["-o", "rss=,pcpu=", "-p", String(pid)], {
+        timeout: 5e3
+      });
+      const trimmed = stdout.trim();
+      if (!trimmed) {
+        return void 0;
+      }
+      const parts = trimmed.split(/\s+/);
+      if (parts.length < 2) {
+        return void 0;
+      }
+      const rssKb = parseInt(parts[0], 10);
+      const cpuPercent = parseFloat(parts[1]);
+      if (isNaN(rssKb) || isNaN(cpuPercent)) {
+        return void 0;
+      }
+      const rssBytes = rssKb * 1024;
+      return {
+        rss: rssBytes,
+        cpuPercent
+      };
+    } catch {
+      return void 0;
+    }
+  }
+};
+
 // ../utils/src/command-utils.ts
 var DEFAULT_TIMEOUT_MS = 30 * 60 * 1e3;
 async function execAndLogOnFailure(cmd, dir, options, logLevel = "info") {
@@ -209845,14 +209923,35 @@ function startHeartbeat(options) {
   timer.unref?.();
   return () => clearInterval(timer);
 }
+var DEFAULT_TELEMETRY_INTERVAL_MS = 5e3;
+function startTelemetry(pid, handler) {
+  const collector = new TelemetryCollector();
+  const intervalMs = handler.intervalMs ?? DEFAULT_TELEMETRY_INTERVAL_MS;
+  const collectAndReport = async () => {
+    const metrics = await collector.collectChildProcessMetrics(pid);
+    if (metrics) {
+      handler.onTelemetry(metrics);
+    }
+  };
+  collectAndReport().catch((err) => {
+    logger.debug("Initial telemetry collection failed:", err);
+  });
+  const timer = setInterval(() => {
+    collectAndReport().catch(() => {
+    });
+  }, intervalMs);
+  timer.unref?.();
+  return () => clearInterval(timer);
+}
 async function execNeverFail(cmd, dir, options) {
   const stopHeartbeat = options?.heartbeat ? startHeartbeat(options.heartbeat) : void 0;
+  let stopTelemetry;
   try {
     return await new Promise((resolve45) => {
       let args2;
       if (typeof cmd !== "string") [cmd, ...args2] = cmd;
       const timeout = options?.timeout ?? DEFAULT_TIMEOUT_MS;
-      const childProcess = execFile(
+      const childProcess = execFile2(
         cmd,
         args2,
         { ...options, cwd: dir, maxBuffer: 1024 * 1024 * 1024, shell: args2 === void 0, timeout },
@@ -209860,6 +209959,9 @@ async function execNeverFail(cmd, dir, options) {
           resolve45({ error, stdout, stderr });
         }
       );
+      if (options?.telemetryHandler && childProcess.pid) {
+        stopTelemetry = startTelemetry(childProcess.pid, options.telemetryHandler);
+      }
       if (options?.pipe) {
         childProcess.stdout?.on("data", (data2) => {
           Spinner.instance().suspend(() => {
@@ -209877,6 +209979,7 @@ async function execNeverFail(cmd, dir, options) {
     });
   } finally {
     stopHeartbeat?.();
+    stopTelemetry?.();
   }
 }
 async function runCommandResolveStdOut(cmd, dir, options) {
@@ -212569,8 +212672,8 @@ var parseKVLine = (set, line) => {
 };
 
 // ../../node_modules/.pnpm/tar@7.4.3/node_modules/tar/dist/esm/normalize-windows-path.js
-var platform = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
-var normalizeWindowsPath = platform !== "win32" ? (p3) => p3 : (p3) => p3 && p3.replace(/\\/g, "/");
+var platform2 = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
+var normalizeWindowsPath = platform2 !== "win32" ? (p3) => p3 : (p3) => p3 && p3.replace(/\\/g, "/");
 
 // ../../node_modules/.pnpm/tar@7.4.3/node_modules/tar/dist/esm/read-entry.js
 var ReadEntry = class extends Minipass {
@@ -214397,8 +214500,8 @@ import path6 from "node:path";
 
 // ../../node_modules/.pnpm/tar@7.4.3/node_modules/tar/dist/esm/get-write-flag.js
 import fs5 from "fs";
-var platform2 = process.env.__FAKE_PLATFORM__ || process.platform;
-var isWindows = platform2 === "win32";
+var platform3 = process.env.__FAKE_PLATFORM__ || process.platform;
+var isWindows = platform3 === "win32";
 var { O_CREAT, O_TRUNC, O_WRONLY } = fs5.constants;
 var UV_FS_O_FILEMAP = Number(process.env.__FAKE_FS_O_FILENAME__) || fs5.constants.UV_FS_O_FILEMAP || 0;
 var fMapEnabled = isWindows && !!UV_FS_O_FILEMAP;
@@ -214653,7 +214756,7 @@ var mkdirpNative = Object.assign(async (path9, options) => {
 
 // ../../node_modules/.pnpm/mkdirp@3.0.1/node_modules/mkdirp/dist/mjs/path-arg.js
 import { parse as parse4, resolve as resolve2 } from "path";
-var platform3 = process.env.__TESTING_MKDIRP_PLATFORM__ || process.platform;
+var platform4 = process.env.__TESTING_MKDIRP_PLATFORM__ || process.platform;
 var pathArg = (path9) => {
   if (/\0/.test(path9)) {
     throw Object.assign(new TypeError("path must be a string without null bytes"), {
@@ -214662,7 +214765,7 @@ var pathArg = (path9) => {
     });
   }
   path9 = resolve2(path9);
-  if (platform3 === "win32") {
+  if (platform4 === "win32") {
     const badWinChars = /[*|"<>?:]/;
     const { root: root3 } = parse4(path9);
     if (badWinChars.test(path9.substring(root3.length))) {
@@ -214922,8 +215025,8 @@ var normalizeUnicode = (s6) => {
 
 // ../../node_modules/.pnpm/tar@7.4.3/node_modules/tar/dist/esm/path-reservations.js
 import { join as join3 } from "node:path";
-var platform4 = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
-var isWindows2 = platform4 === "win32";
+var platform5 = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
+var isWindows2 = platform5 === "win32";
 var getDirs = (path9) => {
   const dirs = path9.split("/").slice(0, -1).reduce((set, path10) => {
     const s6 = set[set.length - 1];
@@ -215079,8 +215182,8 @@ var DOCHOWN = Symbol("doChown");
 var UID = Symbol("uid");
 var GID = Symbol("gid");
 var CHECKED_CWD = Symbol("checkedCwd");
-var platform5 = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
-var isWindows3 = platform5 === "win32";
+var platform6 = process.env.TESTING_TAR_FAKE_PLATFORM || process.platform;
+var isWindows3 = platform6 === "win32";
 var DEFAULT_MAX_DEPTH = 1024;
 var unlinkFile = (path9, cb) => {
   if (!isWindows3) {
@@ -216026,13 +216129,13 @@ async function getNodeExecutable(overridePath) {
   logger.debug("Extracting Node.js binary for spawned processes...");
   extractedNodePath = (async () => {
     const extractedPath = await extractTool("nodejs-binaries", "nodejs-binaries");
-    const { platform: platform7, arch } = process;
+    const { platform: platform9, arch } = process;
     const nodeArch = arch === "arm" ? "arm64" : arch;
-    const isWindows4 = platform7 === "win32";
-    const binaryName = isWindows4 ? `node-${platform7}-${nodeArch}.exe.gz` : `node-${platform7}-${nodeArch}.gz`;
+    const isWindows4 = platform9 === "win32";
+    const binaryName = isWindows4 ? `node-${platform9}-${nodeArch}.exe.gz` : `node-${platform9}-${nodeArch}.gz`;
     const compressedBinaryPath = join4(extractedPath, binaryName);
     if (!await exists(compressedBinaryPath)) {
-      throw new Error(`Node.js binary not found: ${compressedBinaryPath}. Platform: ${platform7}-${nodeArch}`);
+      throw new Error(`Node.js binary not found: ${compressedBinaryPath}. Platform: ${platform9}-${nodeArch}`);
     }
     const tmpDir = join4(getExtractionBaseDir(), "node-runtime");
     await mkdir4(tmpDir, { recursive: true });
@@ -216255,13 +216358,13 @@ async function getUvExecutable() {
   logger.debug("uv not found on system, extracting embedded uv...");
   extractedUvPath = (async () => {
     const extractedPath = await extractTool("uv-binaries", "uv-binaries");
-    const { platform: platform7, arch } = process;
+    const { platform: platform9, arch } = process;
     const nodeArch = arch === "arm" ? "arm64" : arch;
-    const isWindows4 = platform7 === "win32";
-    const binaryName = isWindows4 ? `uv-${platform7}-${nodeArch}.exe.gz` : `uv-${platform7}-${nodeArch}.gz`;
+    const isWindows4 = platform9 === "win32";
+    const binaryName = isWindows4 ? `uv-${platform9}-${nodeArch}.exe.gz` : `uv-${platform9}-${nodeArch}.gz`;
     const compressedBinaryPath = join4(extractedPath, binaryName);
     if (!await exists(compressedBinaryPath)) {
-      throw new Error(`uv binary not found: ${compressedBinaryPath}. Platform: ${platform7}-${nodeArch}`);
+      throw new Error(`uv binary not found: ${compressedBinaryPath}. Platform: ${platform9}-${nodeArch}`);
     }
     const tmpDir = join4(getExtractionBaseDir(), "uv-runtime");
     await mkdir4(tmpDir, { recursive: true });
@@ -227545,7 +227648,7 @@ var Pattern = class _Pattern {
   #isUNC;
   #isAbsolute;
   #followGlobstar = true;
-  constructor(patternList, globList, index2, platform7) {
+  constructor(patternList, globList, index2, platform9) {
     if (!isPatternList(patternList)) {
       throw new TypeError("empty pattern list");
     }
@@ -227562,7 +227665,7 @@ var Pattern = class _Pattern {
     this.#patternList = patternList;
     this.#globList = globList;
     this.#index = index2;
-    this.#platform = platform7;
+    this.#platform = platform9;
     if (this.#index === 0) {
       if (this.isUNC()) {
         const [p0, p1, p22, p3, ...prest] = this.#patternList;
@@ -227704,12 +227807,12 @@ var Ignore = class {
   absoluteChildren;
   platform;
   mmopts;
-  constructor(ignored, { nobrace, nocase, noext, noglobstar, platform: platform7 = defaultPlatform2 }) {
+  constructor(ignored, { nobrace, nocase, noext, noglobstar, platform: platform9 = defaultPlatform2 }) {
     this.relative = [];
     this.absolute = [];
     this.relativeChildren = [];
     this.absoluteChildren = [];
-    this.platform = platform7;
+    this.platform = platform9;
     this.mmopts = {
       dot: true,
       nobrace,
@@ -227717,7 +227820,7 @@ var Ignore = class {
       noext,
       noglobstar,
       optimizationLevel: 2,
-      platform: platform7,
+      platform: platform9,
       nocomment: true,
       nonegate: true
     };
@@ -228596,7 +228699,7 @@ import { join as join10, resolve as resolve18 } from "path";
 
 // ../utils/dist/command-utils.js
 import assert9 from "assert";
-import { execFile as execFile2 } from "child_process";
+import { execFile as execFile4 } from "child_process";
 
 // ../utils/dist/spinner.js
 var import_lodash4 = __toESM(require_lodash(), 1);
@@ -228730,6 +228833,65 @@ var Spinner2 = class _Spinner {
   }
 };
 
+// ../utils/dist/telemetry/telemetry-collector.js
+import { execFile as execFile3 } from "child_process";
+import { platform as platform7 } from "os";
+import { promisify as promisify2 } from "util";
+var execFileAsync2 = promisify2(execFile3);
+var TelemetryCollector2 = class {
+  /**
+   * Collect memory metrics for a child process by PID.
+   * Uses OS-specific commands to query memory usage.
+   *
+   * @param pid - The process ID to query
+   * @returns TelemetryMetrics or undefined if the process doesn't exist or query fails
+   */
+  async collectChildProcessMetrics(pid) {
+    if (!Number.isInteger(pid) || pid <= 0) {
+      return void 0;
+    }
+    try {
+      const currentPlatform = platform7();
+      if (currentPlatform === "darwin" || currentPlatform === "linux") {
+        return await this.collectUnixProcessMetrics(pid);
+      }
+      return void 0;
+    } catch {
+      return void 0;
+    }
+  }
+  /**
+   * Collect metrics for a Unix-like system (macOS, Linux) using ps command.
+   */
+  async collectUnixProcessMetrics(pid) {
+    try {
+      const { stdout } = await execFileAsync2("ps", ["-o", "rss=,pcpu=", "-p", String(pid)], {
+        timeout: 5e3
+      });
+      const trimmed = stdout.trim();
+      if (!trimmed) {
+        return void 0;
+      }
+      const parts = trimmed.split(/\s+/);
+      if (parts.length < 2) {
+        return void 0;
+      }
+      const rssKb = parseInt(parts[0], 10);
+      const cpuPercent = parseFloat(parts[1]);
+      if (isNaN(rssKb) || isNaN(cpuPercent)) {
+        return void 0;
+      }
+      const rssBytes = rssKb * 1024;
+      return {
+        rss: rssBytes,
+        cpuPercent
+      };
+    } catch {
+      return void 0;
+    }
+  }
+};
+
 // ../utils/dist/command-utils.js
 var DEFAULT_TIMEOUT_MS2 = 30 * 60 * 1e3;
 async function execAndLogOnFailure3(cmd, dir, options, logLevel = "info") {
@@ -228760,17 +228922,41 @@ function startHeartbeat2(options) {
   timer.unref?.();
   return () => clearInterval(timer);
 }
+var DEFAULT_TELEMETRY_INTERVAL_MS2 = 5e3;
+function startTelemetry2(pid, handler) {
+  const collector = new TelemetryCollector2();
+  const intervalMs = handler.intervalMs ?? DEFAULT_TELEMETRY_INTERVAL_MS2;
+  const collectAndReport = async () => {
+    const metrics = await collector.collectChildProcessMetrics(pid);
+    if (metrics) {
+      handler.onTelemetry(metrics);
+    }
+  };
+  collectAndReport().catch((err) => {
+    logger.debug("Initial telemetry collection failed:", err);
+  });
+  const timer = setInterval(() => {
+    collectAndReport().catch(() => {
+    });
+  }, intervalMs);
+  timer.unref?.();
+  return () => clearInterval(timer);
+}
 async function execNeverFail3(cmd, dir, options) {
   const stopHeartbeat = options?.heartbeat ? startHeartbeat2(options.heartbeat) : void 0;
+  let stopTelemetry;
   try {
     return await new Promise((resolve45) => {
       let args2;
       if (typeof cmd !== "string")
         [cmd, ...args2] = cmd;
       const timeout = options?.timeout ?? DEFAULT_TIMEOUT_MS2;
-      const childProcess = execFile2(cmd, args2, { ...options, cwd: dir, maxBuffer: 1024 * 1024 * 1024, shell: args2 === void 0, timeout }, (error, stdout, stderr) => {
+      const childProcess = execFile4(cmd, args2, { ...options, cwd: dir, maxBuffer: 1024 * 1024 * 1024, shell: args2 === void 0, timeout }, (error, stdout, stderr) => {
         resolve45({ error, stdout, stderr });
       });
+      if (options?.telemetryHandler && childProcess.pid) {
+        stopTelemetry = startTelemetry2(childProcess.pid, options.telemetryHandler);
+      }
       if (options?.pipe) {
         childProcess.stdout?.on("data", (data2) => {
           Spinner2.instance().suspend(() => {
@@ -228789,6 +228975,7 @@ async function execNeverFail3(cmd, dir, options) {
     });
   } finally {
     stopHeartbeat?.();
+    stopTelemetry?.();
   }
 }
 async function runCommandResolveStdOut3(cmd, dir, options) {
@@ -235517,7 +235704,7 @@ var import_lodash12 = __toESM(require_lodash(), 1);
 import { rmSync } from "fs";
 import { mkdir as mkdir5, readFile as readFile30, writeFile as writeFile10 } from "fs/promises";
 import assert15 from "node:assert";
-import { platform as platform6 } from "os";
+import { platform as platform8 } from "os";
 import { join as join25, posix as posix2, relative as relative16, sep as sep3 } from "path";
 
 // ../utils/src/tmp-file.ts
@@ -236196,7 +236383,7 @@ var setUpGoModuleCache = once7(async () => {
   const { stdout, error } = await execNeverFail2("go env GOMODCACHE");
   if (error ?? !await exists(stdout.trim()))
     return;
-  if (platform6() !== "linux") return stdout.trim();
+  if (platform8() !== "linux") return stdout.trim();
   const tmpDir = await createTmpDirectory("coana-go-module-cache-");
   let volume;
   const cleanup = once7(() => {
@@ -236847,6 +237034,15 @@ function getTypeFromEcosystem(ecosystem) {
   }
 }
 
+// ../web-compat-utils/src/ghsa.ts
+function extractGHSAIdFromUrl(url2) {
+  const match2 = url2.match(/(GHSA-[a-z0-9-]+)/);
+  if (match2) {
+    return match2[1];
+  }
+  return void 0;
+}
+
 // ../web-compat-utils/src/dismissed-vulnerability-utils.ts
 function getRelevantDismissedVulnerabilities(dismissedVulnerabilities, vulnerability) {
   const isServer = typeof window === "undefined";
@@ -238482,6 +238678,39 @@ var DashboardAPI = class {
       await this.socketAPI.sendLogChunkSocket(reportId, logs);
     }
   }
+  async createAnalysisMetadata(tier1ScanId, subprojectPath, workspacePath, ecosystem, ghsaIds, heuristicName, experimentName) {
+    if (this.disableAnalyticsSharing) {
+      return void 0;
+    }
+    if (this.socketMode) {
+      return await this.socketAPI.createAnalysisMetadataSocket(
+        tier1ScanId,
+        subprojectPath,
+        workspacePath,
+        ecosystem,
+        ghsaIds,
+        heuristicName,
+        experimentName
+      );
+    }
+    return void 0;
+  }
+  async sendTelemetry(analysisMetadataId, telemetry) {
+    if (this.disableAnalyticsSharing) {
+      return;
+    }
+    if (this.socketMode) {
+      await this.socketAPI.sendTelemetrySocket(analysisMetadataId, telemetry);
+    }
+  }
+  async registerDiagnosticsToAnalysisMetadata(analysisMetadataId, diagnosticsData) {
+    if (this.disableAnalyticsSharing || !analysisMetadataId) {
+      return;
+    }
+    if (this.socketMode) {
+      this.socketAPI.registerDiagnosticsToAnalysisMetadataSocket(analysisMetadataId, diagnosticsData).catch((err) => logger.debug("Failed to register diagnostics to analysis metadata:", err));
+    }
+  }
 };
 
 // ../utils/src/dashboard-api/batched-http-log-streamer.ts
@@ -240150,7 +240379,7 @@ function getMongoClient() {
 
 // ../security-auditor/security-auditor-api/src/vulnerability-patterns-helper/get-interesting-urls-for-vulnerability.ts
 import { exec as exec3 } from "child_process";
-import { promisify } from "util";
+import { promisify as promisify3 } from "util";
 
 // ../../node_modules/.pnpm/cheerio@1.0.0-rc.12/node_modules/cheerio/lib/esm/options.js
 var defaultOpts = {
@@ -253745,7 +253974,7 @@ async function getInterestingURLsForVulnerability(vulnerability, packageMetadata
 }
 async function computeComparisonURLs(scmUrl, vulnAndFixVersionsArr) {
   try {
-    const gitTags = (await promisify(exec3)(`git ls-remote ${scmUrl} | grep -F "refs/tags"`)).stdout.split("\n");
+    const gitTags = (await promisify3(exec3)(`git ls-remote ${scmUrl} | grep -F "refs/tags"`)).stdout.split("\n");
     logger3.debug("gitTags", gitTags);
     logger3.debug("vulnAndFixVersionsArr", vulnAndFixVersionsArr);
     const versionToSha = {};
@@ -253780,7 +254009,7 @@ async function computeInterestingCommitURLs(text3, scmUrl) {
     const repo = scmUrl.split("/").slice(-2).join("/");
     const cmd = `gh search commits ${text3} --repo ${repo}`;
     logger3.debug(`Finding issue or PR url for text ${text3}`, cmd);
-    const { stdout } = await promisify(exec3)(cmd, { shell: "/bin/zsh" });
+    const { stdout } = await promisify3(exec3)(cmd, { shell: "/bin/zsh" });
     return stdout.split("\n").filter((line) => line).map((line) => {
       const [repo2, sha] = line.split("	");
       return `https://www.github.com/${repo2}/commit/${sha}`;
@@ -253794,7 +254023,7 @@ async function computeInterestingIssueAndPRUrlsWithText(text3, scmUrl) {
   const repo = scmUrl.split("/").slice(-2).join("/");
   const cmd = `gh search issues ${text3} in:title,body,comment --repo ${repo} --include-prs`;
   console.log(`Finding issue or PR url for text ${text3}`, cmd);
-  const { stdout } = await promisify(exec3)(cmd, { shell: "/bin/zsh" });
+  const { stdout } = await promisify3(exec3)(cmd, { shell: "/bin/zsh" });
   return stdout.split("\n").filter((line) => line).map((line) => {
     const [issueOrPr, repo2, id] = line.split("	");
     const issueOrPrUrlPart = issueOrPr === "issue" ? "issues" : "pull";
@@ -255023,7 +255252,7 @@ async function onlineScan(dependencyTree, apiKey, timeout) {
 }
 
 // dist/version.js
-var version3 = "14.12.143";
+var version3 = "14.12.144";
 
 // dist/cli-core.js
 var { mapValues, omit, partition, pickBy: pickBy2 } = import_lodash15.default;